$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer File: DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.cer (raw, json) Hash identifier: 3RvVfd5oWmcoN/BwC/NlvYhaG74qANUkwPZNwf+Mmyk= Subject key identifier: DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 21165A47FB9D063B009823A17664178859C0307B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.mft caRepository: rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 03 Mar 2025 23:49:05 +0000 Certificate not after: Mon 02 Mar 2026 23:54:05 +0000 Subordinate resources: AS: 266165 IP: 72.44.16.0/22 IP: 2804:3bb0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:16:5a:47:fb:9d:06:3b:00:98:23:a1:76:64:17:88:59:c0:30:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 3 23:49:05 2025 GMT Not After : Mar 2 23:54:05 2026 GMT Subject: CN=DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:32:a8:60:2a:4d:ab:a1:bc:92:ac:e5:a0: e6:67:76:6c:70:8c:d8:c6:5e:89:72:a1:a3:e1:b7: d4:52:55:dc:ec:5d:7d:15:5d:69:2c:b9:da:18:b2: e8:eb:52:53:d0:82:c0:e1:ef:d8:1e:c9:88:a8:78: a1:e2:83:c1:c7:e0:be:2c:42:f2:86:21:9c:15:d6: cb:a1:d4:0b:87:1b:ab:4b:c2:d4:06:13:64:86:12: b8:76:cc:90:71:30:c4:f5:40:25:75:9d:a3:11:72: f8:25:b3:44:a3:f4:0e:8b:83:84:bd:73:dc:e7:93: 25:db:c2:7b:aa:b9:08:b0:30:59:ed:9d:eb:d6:51: c9:f1:5d:de:a5:92:d0:80:a6:79:19:11:2a:dc:8d: 8b:49:6b:90:ea:07:48:86:80:75:cd:18:66:09:3d: 22:ca:e1:6f:96:96:cd:0a:60:81:33:51:cb:e6:58: bf:1b:ff:3c:0a:3a:63:32:f2:ef:a1:37:32:98:9d: 7e:72:16:fe:e4:a9:52:5e:74:de:74:ec:75:40:b0: 64:43:29:4d:f5:28:07:1e:b3:a8:4a:5b:8e:e0:80: 7c:ec:13:23:bb:21:94:e4:e7:ca:7c:e5:48:05:d7: df:c2:d0:05:ee:ed:ed:9b:24:7d:f4:a3:8a:cd:2e: b7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:B1:65:A5:5B:30:AA:C4:E3:2C:EC:8F:E9:B4:38:6E:F0:EA:8D:3C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/DFB165A55B30AAC4E32CEC8FE9B4386EF0EA8D3C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.44.16.0/22 IPv6: 2804:3bb0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266165 Signature Algorithm: sha256WithRSAEncryption 16:22:75:70:5b:29:fd:44:a0:b1:60:c2:98:d0:1f:fa:2c:2d: 2b:bc:84:dc:9b:d4:f4:a9:6c:7b:8f:fb:76:bd:06:14:d4:82: 3f:e1:4d:cf:34:60:40:ef:8f:0d:16:69:07:5b:d9:3f:82:d3: f4:67:e3:9c:49:da:66:74:15:0d:16:f8:da:e6:e2:86:4f:b8: 84:b6:cf:60:c7:f6:ac:18:fe:cf:6e:7f:69:16:1f:a7:6e:fb: 8f:0c:a3:ee:a7:29:01:93:77:28:9a:7f:ea:d2:a9:40:6f:81: ab:60:17:d0:5c:de:cf:7a:8c:e4:ce:2f:a1:7e:76:91:d1:29: 0b:66:e6:53:8b:a8:08:31:ea:14:5a:98:95:9b:ab:9f:95:fb: 9c:68:65:f4:b3:3c:c2:ec:fa:be:e0:3f:76:7b:64:c6:22:71: 79:c5:fb:82:1b:18:fd:56:6f:4b:6e:90:7d:f9:9d:61:48:94: ca:35:db:32:4d:ba:06:32:80:b4:0f:ce:4d:0f:a0:4b:d7:0c: 91:48:66:4b:bd:da:cf:bf:10:29:31:e8:a1:57:1a:00:f0:a5: 25:0a:f1:8f:5d:0d:4f:a6:bd:04:05:9e:f9:00:78:bb:9f:8f: f8:eb:ec:35:e5:e4:44:45:5e:a9:be:42:47:84:1b:1c:b2:51: ce:c5:cf:ce -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUIRZaR/udBjsAmCOhdmQXiFnAMHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDMyMzQ5MDVaFw0yNjAzMDIyMzU0MDVaMDMxMTAvBgNV BAMTKERGQjE2NUE1NUIzMEFBQzRFMzJDRUM4RkU5QjQzODZFRjBFQThEM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGzKoYCpNq6G8kqzloOZndmxw jNjGXolyoaPht9RSVdzsXX0VXWksudoYsujrUlPQgsDh79geyYioeKHig8HH4L4s QvKGIZwV1suh1AuHG6tLwtQGE2SGErh2zJBxMMT1QCV1naMRcvgls0Sj9A6Lg4S9 c9znkyXbwnuquQiwMFntnevWUcnxXd6lktCApnkZESrcjYtJa5DqB0iGgHXNGGYJ PSLK4W+Wls0KYIEzUcvmWL8b/zwKOmMy8u+hNzKYnX5yFv7kqVJedN507HVAsGRD KU31KAces6hKW47ggHzsEyO7IZTk58p85UgF19/C0AXu7e2bJH30o4rNLreJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfsWWlWzCqxOMs 7I/ptDhu8OqNPDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjRo c1VnUkg4bW9jWERBNUJ3U0gyVFRwRHZzQmR3cVNUNDNCRUJKZ0VxajIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0o0 aHNVZ1JIOG1vY1hEQTVCd1NIMlRUcER2c0Jkd3FTVDQzQkVCSmdFcWoyLzAvREZC MTY1QTU1QjMwQUFDNEUzMkNFQzhGRTlCNDM4NkVGMEVBOEQzQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCSCwQMA0EAgACMAcDBQAoBDuwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPtTANBgkqhkiG9w0BAQsFAAOCAQEAFiJ1cFsp/USgsWDC mNAf+iwtK7yE3JvU9Klse4/7dr0GFNSCP+FNzzRgQO+PDRZpB1vZP4LT9GfjnEna ZnQVDRb42ubihk+4hLbPYMf2rBj+z25/aRYfp277jwyj7qcpAZN3KJp/6tKpQG+B q2AX0Fzez3qM5M4voX52kdEpC2bmU4uoCDHqFFqYlZurn5X7nGhl9LM8wuz6vuA/ dntkxiJxecX7ghsY/VZvS26QffmdYUiUyjXbMk26BjKAtA/OTQ+gS9cMkUhmS73a z78QKTHooVcaAPClJQrxj10NT6a9BAWe+QB4u5+P+OvsNeXkREVeqb5CR4QbHLJR zsXPzg== -----END CERTIFICATE-----Generated at Sat Apr 5 04:31:13 2025 by rpki-client